I found this in my logs. They proceeded to send about 3000 email messages after this. Why can they do this when I have relay mail for addresses and they are not in the list of addresses.
03:10 00:37 SMTP-(00000A84) processing C:\IMail\spool\Q4ed50e1600aa10e7.SMD 03:10 00:37 SMTP-(00000A84) Trying 989888.com (0) 03:10 00:37 SMTP-(00000A84) Connect 989888.com [66.139.77.28:25] (1) 03:10 00:37 SMTP-(00000A84) 220 989888.com (IMail 7.13 EVAL 115393-17) NT-ESMTP Server X1 03:10 00:37 SMTP-(00000A84) >EHLO websitehosting.net 03:10 00:37 SMTP-(00000A84) 250-989888.com says hello 03:10 00:37 SMTP-(00000A84) 250-SIZE 0 03:10 00:37 SMTP-(00000A84) 250-8BITMIME 03:10 00:37 SMTP-(00000A84) 250-DSN 03:10 00:37 SMTP-(00000A84) 250-ETRN 03:10 00:37 SMTP-(00000A84) 250-AUTH LOGIN CRAM-MD5 03:10 00:37 SMTP-(00000A84) 250-AUTH=LOGIN 03:10 00:37 SMTP-(00000A84) 250 EXPN 03:10 00:37 SMTP-(00000A84) >MAIL FROM:<[EMAIL PROTECTED]> 03:10 00:37 SMTP-(00000A84) 250 ok 03:10 00:37 SMTP-(00000A84) >RCPT To:<[EMAIL PROTECTED]> 03:10 00:37 SMTP-(00000A84) 250 ok its for <[EMAIL PROTECTED]> 03:10 00:37 SMTP-(00000A84) >DATA 03:10 00:37 SMTP-(00000A84) 354 ok, send it; end with <CRLF>.<CRLF> 03:10 00:37 SMTP-(00000A84) >. 03:10 00:37 SMTP-(00000A84) 250 Message queued 03:10 00:37 SMTP-(00000A84) rdeliver 989888.com [EMAIL PROTECTED] (1) <[EMAIL PROTECTED]> 343 03:10 00:37 SMTP-(00000A84) >QUIT 03:10 00:37 SMTP-(00000A84) 221 Goodbye 03:10 00:37 SMTP-(00000A84) finished C:\IMail\spool\Q4ed50e1600aa10e7.SMD status=1 Thanks, Brian Brian Goldman Dynamix Incorporated http://www.websitehosting.net 541-734-5407 877-377-2419 To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
